Tailoring

Choosing and adapting the mix of processes, inputs, tools, techniques, outputs, and life cycle stages so they fit the needs of a specific project.

Key Points

  • Driven by project context: size, complexity, risk, industry, regulations, and stakeholder needs.
  • Done early and revisited as the project evolves to keep the approach aligned with reality.
  • Streamlines work without ignoring mandatory governance, quality, or compliance requirements.
  • Decisions are documented in the project management plan, including what was adapted and why.

Example

A PM leading a medical device software project keeps rigorous change control and verification gates for compliance, adopts iterative development for software components, adds extra risk reviews, and drops nonessential templates. This customized mix of processes and life cycle stages is tailoring.

PMP Example Question

Which action best illustrates tailoring on a project?

  1. Applying every process from the standard to ensure nothing is missed.
  2. Modifying the life cycle and selected tools to match project complexity and regulatory needs.
  3. Adding extra features to exceed customer expectations without approval.
  4. Compressing the schedule using fast tracking and crashing techniques.

Correct Answer: B — Customizing the methodology to fit the project

Explanation: Tailoring is selecting and adapting processes, tools, techniques, outputs, and life cycle stages to suit the specific project context. The other options describe over-application, gold plating, or schedule compression.

ICS/OT Cybersecurity Fundamentals — Security Built for Industrial Systems

Industrial control systems cannot be secured like ordinary IT. A forced reboot, aggressive scan, or incompatible patch can interrupt production and create real safety consequences. Effective OT security begins with understanding the systems, constraints, and risks unique to industrial environments.

This course gives IT professionals, engineers, operators, and security practitioners a practical foundation in ICS threats, zone and conduit design, risk assessment, passive asset visibility, and vendor evaluation. You will learn how IEC 62443, NIST CSF, and MITRE ATT&CK for ICS apply where availability and safety come first.

Eight reconstructed incidents—including Stuxnet, Triton, Ukraine 2015, Colonial Pipeline, and PIPEDREAM—show how attackers move through OT environments, what they target, and which defenses could have changed the outcome.

Watch the course preview, then build the vocabulary, frameworks, and judgment needed to take credible first steps in ICS/OT cybersecurity.

Explore the Course


ICS/OT Cybersecurity Fundamentals course preview

Run the drill before the incident runs you

Design, run and prove OT drills and tabletop exercises before an incident tests your team. OT Incident Drills and Exercises includes 24 lessons and practical exercise materials, delivered through HKSM Courses for US$47 one-time. 30-day money-back guarantee when 50% or less of the course has been consumed.

Explore the Course